diff options
| author |   job <job@openbsd.org> | 2019-11-07 12:49:45 +0000 |
|---|---|---|
| committer | job <job@openbsd.org> | 2019-11-07 12:49:45 +0000 |
| commit | 1e3cc862d66e64261e6125038f59f630cfcbc998 (patch) | |
| tree | 21f74110c0f4d0608570ac915a8bb92fe92b9777 | |
| parent | Only root is allowed to set the WEP key. Add an suser() check to (diff) | |
| download | wireguard-openbsd-1e3cc862d66e64261e6125038f59f630cfcbc998.tar.xz wireguard-openbsd-1e3cc862d66e64261e6125038f59f630cfcbc998.zip | |
Enable DNSSEC validation in unbound by default
OK deraadt@ otto@
| -rw-r--r-- | etc/unbound.conf | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/unbound.conf b/etc/unbound.conf index f226d77fff0..b46847e3a31 100644 --- a/etc/unbound.conf +++ b/etc/unbound.conf @@ -1,4 +1,4 @@ -# $OpenBSD: unbound.conf,v 1.17 2019/08/25 15:50:21 ajacoutot Exp $ +# $OpenBSD: unbound.conf,v 1.18 2019/11/07 12:49:45 job Exp $ server: interface: 127.0.0.1 @@ -19,9 +19,9 @@ server: hide-identity: yes hide-version: yes - # Uncomment to enable DNSSEC validation. + # Perform DNSSEC validation. Comment out the below option to disable. # - #auto-trust-anchor-file: "/var/unbound/db/root.key" + auto-trust-anchor-file: "/var/unbound/db/root.key" #val-log-level: 2 # Uncomment to synthesize NXDOMAINs from DNSSEC NSEC chains |